CGA-2FF3-MM7V-M357

Bulletin has no description...

CVE-2026-35090

creationtimestamp| type| source ---|---|--- 2026-05-27 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-35087 2026-05-27 15:45:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtu2f5gju2i...

CVE-2026-35089

creationtimestamp| type| source ---|---|--- 2026-05-27 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-35087 2026-05-27 15:38:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmttnp42zq2c...

CVE-2026-9115

creationtimestamp| type| source ---|---|--- 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260527...

CVE-2026-9110

creationtimestamp| type| source ---|---|--- 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260527 2026-06-10...

CVE-2026-9117

creationtimestamp| type| source ---|---|--- 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260527 2026-06-04...

CVE-2026-9116

creationtimestamp| type| source ---|---|--- 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260527...

CVE-2026-9455 Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection

A vulnerability has been found in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command injection. Remote exploitation of the...

CVE-2026-9455 Totolink A8000RU Web Management cstecgi.cgi UploadOpenVpnCert os command injection

A vulnerability has been found in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command injection. Remote exploitation of the...

CVE-2026-9455

A vulnerability has been found in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command injection. Remote exploitation of the...

CVE-2026-40127

creationtimestamp| type| source ---|---|--- 2026-05-25 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-40127...

PT-2026-43043

A vulnerability has been found in Totolink A8000RU 7.1cu.643 b20200521. This issue affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument FileName leads to os command injection. Remote exploitation of the...

AZL-87426 CVE-2026-27136 affecting package cert-manager for versions less than 1.12.15-9

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87420 CVE-2026-42502 affecting package cert-manager for versions less than 1.12.15-9

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87393 CVE-2026-39821 affecting package cert-manager for versions less than 1.12.15-9

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

AZL-87432 CVE-2026-42506 affecting package cert-manager for versions less than 1.12.15-9

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87414 CVE-2026-25680 affecting package cert-manager for versions less than 1.12.15-9

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

AZL-87435 CVE-2026-25681 affecting package cert-manager for versions less than 1.12.15-9

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

CVE-2026-8997

creationtimestamp| type| source ---|---|--- 2026-05-22 06:55:00+00:00| seen| https://cert.pl/en/posts/2026/05/CVE-2026-8997 2026-09-29 12:47:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117354399908091855...

AZL-87405 CVE-2026-46597 affecting package cert-manager for versions less than 1.12.15-9

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...